Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/myGM4-NLtD_Dtz0g0MiTaDcKvf8.roa
File: myGM4-NLtD_Dtz0g0MiTaDcKvf8.roa (raw, json)
Hash identifier: C3kuUxHhsr6xs6mJzQGzkJlaSuHcAk2fDha65bhfgjs=
Subject key identifier: 9B:21:8C:E3:E3:4B:B4:3F:C3:B7:3D:20:D0:C8:93:68:37:0A:BD:FF
Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial: 35F94E6D
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/myGM4-NLtD_Dtz0g0MiTaDcKvf8.roa
Signing time: Sat 01 Jan 2022 09:03:16 +0000
ROA not before: Sat 01 Jan 2022 09:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9044
IP address blocks: 82.220.0.0/16 maxlen: 18
185.252.240.0/22 maxlen: 23
212.101.0.0/19 maxlen: 20
212.41.64.0/18 maxlen: 19
194.124.208.0/24 maxlen: 24
2001:1680::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905530989 (0x35f94e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Validity
Not Before: Jan 1 09:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b218ce3e34bb43fc3b73d20d0c89368370abdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:46:8c:2d:e1:6d:67:f4:fd:c7:32:75:e5:
67:42:55:59:2b:98:0c:34:73:34:6d:b7:74:13:fd:
ca:f2:83:f2:9c:2a:39:27:90:a3:a2:cb:04:89:a8:
4c:ad:04:1e:83:59:52:1d:ce:7e:e9:10:77:0f:2c:
20:d7:d4:21:c2:a9:2e:d4:33:d7:de:8f:eb:09:49:
92:98:c4:68:c4:fb:c4:cf:da:31:22:f3:7b:c0:9b:
77:ea:9e:d0:b6:06:01:3b:85:d3:90:d9:bc:1c:e4:
cc:81:25:69:b6:92:90:ff:e4:82:92:ce:ff:38:30:
20:69:b9:fa:2c:4b:c7:bb:95:c2:68:b5:f4:53:06:
8a:ac:2a:4a:ec:cf:7a:3f:2f:cd:07:3d:4c:ba:48:
dd:c2:54:cb:51:af:0e:45:d9:8d:49:9b:75:73:7a:
36:ba:8f:cc:e3:75:26:32:b6:3b:6e:f7:4c:ff:7e:
d3:f1:a5:2c:79:95:47:d1:e5:35:7a:3c:80:92:fe:
18:07:b1:00:95:b3:6e:42:7f:5d:25:22:ce:8c:44:
7a:71:43:71:6b:75:ef:9c:88:fa:43:2f:88:fa:e2:
c8:80:a2:f0:15:e4:00:b9:70:be:a4:0f:38:ed:22:
c8:75:46:88:e5:0d:45:b8:84:20:75:b2:0e:bf:5d:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:8C:E3:E3:4B:B4:3F:C3:B7:3D:20:D0:C8:93:68:37:0A:BD:FF
X509v3 Authority Key Identifier:
keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/myGM4-NLtD_Dtz0g0MiTaDcKvf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.220.0.0/16
185.252.240.0/22
194.124.208.0/24
212.41.64.0/18
212.101.0.0/19
IPv6:
2001:1680::/29
Signature Algorithm: sha256WithRSAEncryption
19:4c:2f:04:2e:5f:0b:f3:06:33:66:dc:04:ef:b0:a7:a9:6d:
18:c7:d6:1b:ee:b2:56:a6:ac:a3:c7:2c:be:c9:9c:0b:20:be:
84:fd:f2:b7:9b:09:f1:ab:63:70:99:87:7f:a2:bc:2c:40:09:
cd:c5:18:48:de:25:c8:79:ae:20:c7:41:36:0e:61:e0:73:f4:
2f:f1:9b:f7:03:ce:41:f1:9b:22:17:d3:c6:f4:f2:61:bd:54:
9b:81:1a:57:be:05:65:b3:f7:a3:87:c8:c1:56:41:88:ea:eb:
35:a2:9b:9f:f5:cc:a9:15:fe:20:1d:0a:c6:80:c6:d3:07:1f:
e8:4c:63:b1:ef:49:d4:71:0b:35:12:26:7e:f2:6f:27:6e:82:
9d:c8:62:b6:bd:cd:2e:98:14:07:5c:ff:6d:91:a2:cd:02:24:
9d:0f:d9:67:00:f8:db:64:57:f1:ae:59:3d:ec:db:96:4c:a4:
6b:6d:98:eb:bf:4b:80:8a:ee:60:6c:ce:25:c2:54:3c:66:0a:
af:58:c5:ff:42:bf:81:fe:2c:38:d8:4a:25:4b:c5:9b:b2:1c:
f4:4c:04:0e:dc:bd:b1:c9:e8:4c:b7:b9:fb:90:1b:6e:9d:58:
f4:f7:25:0a:41:2f:5c:56:ca:47:4d:84:ca:7d:8b:93:39:0b:
d6:1f:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:07 2024 by rpki-client on console-ams.rpki-client.org